GreyhavenHQ/greywall

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

agent runtime security - zero trust, zero setup, zero latency agent sandbox

A local-first microVM sandbox for running AI agents safely on macOS & Linux

Sandbox your local AI agents so they can read/write only what they need

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

Multi-OS sandbox to run AI agents with better constraints (it is not 100% secure, but enough)

Secure, Fast, and Extensible Sandbox runtime for AI agents.

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.